Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: atl+4YeGYx4LJoGpB69aZWQd7/+rJj8VW7I+cZh1RRk=
Subject key identifier: B7:61:00:6F:3A:92:32:36:A0:F4:08:60:3E:BC:DC:AE:CB:29:D1:05
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019D27DF8E01C98DBF24C6CEEE8ABEC68F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0DE2
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: S3x/g5GuRF0UOUcCQZFCTflxaF1+WwlPkzfzBIQTHEM=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8e:01:c9:8d:bf:24:c6:ce:ee:8a:be:c6:8f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=b761006f3a923236a0f408603ebcdcaecb29d105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:2c:a2:9f:3a:36:3b:6b:9e:49:15:96:43:
80:2f:b8:34:47:1a:02:4c:42:a4:d7:8b:b6:b4:21:
e8:cc:f0:58:cd:34:cf:b4:bf:d4:7f:bc:89:a0:13:
5f:7b:49:29:11:98:e9:c8:42:4a:76:9d:e2:e2:6e:
1e:a6:03:6f:b2:54:1c:1c:01:cb:8c:4c:a5:9a:49:
6d:47:5d:cf:a7:2c:a4:8b:8f:6c:b1:95:80:e8:c8:
02:ea:48:b1:1a:b2:af:a0:89:8a:ae:e2:8e:66:e8:
e6:41:38:f5:a7:4f:c7:d0:2b:14:7d:4b:b5:cc:d4:
a3:2f:12:b3:13:a2:91:c7:ec:ad:ee:74:0f:a1:ca:
7e:68:e7:6e:39:55:a1:36:1e:8d:c8:84:4f:46:8b:
62:aa:b1:b2:5f:3c:65:9e:7b:c8:b1:4d:6a:9d:7e:
2e:db:e3:26:e1:02:73:45:06:f5:31:9e:06:ea:e1:
b7:c4:71:ba:e8:ee:3e:07:af:38:87:ed:c6:4a:e2:
3e:9e:91:fb:9e:47:83:1c:a5:48:67:b3:c9:44:f2:
25:1c:39:13:d0:d7:40:6a:8b:dc:1f:1c:dd:17:34:
5d:f7:6d:11:ef:c9:ef:7b:e9:fb:45:ca:88:de:25:
87:37:40:02:aa:fe:57:2c:5b:f2:06:14:c9:22:0d:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:61:00:6F:3A:92:32:36:A0:F4:08:60:3E:BC:DC:AE:CB:29:D1:05
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7d:f5:c7:a7:7e:d6:c3:8c:c6:d1:1a:82:a3:3d:bd:4a:40:
02:e8:46:5d:bb:ac:22:dd:c4:b9:77:38:2f:5c:5e:08:d4:38:
21:70:52:23:4b:d2:ba:b2:d0:eb:d0:cf:b9:73:ad:91:c7:42:
d9:2d:a2:31:41:10:55:14:41:c4:ec:0f:11:bc:ce:01:ff:df:
ea:fe:e8:68:a4:5c:2a:50:cd:22:ba:48:c6:15:c3:d0:f7:84:
1e:9f:80:4d:31:22:de:4a:56:ee:fe:46:e5:42:41:51:af:68:
03:82:63:71:ce:2e:f1:84:8a:9f:d4:cc:b1:8d:f0:66:db:bf:
ad:f2:be:fd:f2:9b:d3:cf:43:38:82:59:65:30:d1:5d:2c:09:
35:56:07:aa:4f:1e:fc:45:64:c8:46:16:82:e8:e3:5d:4b:82:
e0:63:6c:ea:73:f8:01:86:d6:89:da:77:82:d9:9d:ce:0f:d9:
55:2b:b4:5e:a1:54:02:85:0c:6a:68:a3:33:b3:86:0f:df:de:
0a:77:81:81:d7:0a:6b:d4:5d:30:c9:8d:e1:02:7c:5b:8c:2b:
c1:63:1b:c5:c6:2e:bd:52:bc:35:eb:0f:2a:01:d0:47:bf:1a:
cc:02:8e:62:78:b3:fc:0a:c7:a7:bd:c6:f5:03:9c:c2:72:f7:
a8:cb:8a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:27:18 2026 by rpki-client